Security at Office Guard

What we never keep

• The content of your mail. Messages are checked as they arrive or as you write them, and then let go. We do not store message bodies, subjects, or attachments. No person at Office Guard reads your mail.
• Your texts. Text protection runs on your phone. A text that looks like a scam is filed or flagged there; the text itself is never sent to us or stored.
• What you send with Encrypted Send. Your message is encrypted in your browser with AES-256-GCM before it leaves. Our server stores the sealed copy and never has the key or the spoken words that open it.
• Card numbers. Payments are handled by Stripe on the website and by Apple and Google in the apps. Card details never touch our systems.

What we keep

• Your account: name, company, email address, phone number, plan, and billing status.
• Findings: when a check fires, a record of which check, how serious, when, and the sender or number involved. Not the message. Findings are kept for 12 months while you subscribe, and for 30 days after a subscription ends.
• Mailbox connection details for the mailbox you chose to protect, encrypted at rest with AES-256-GCM and deleted 30 days after you disconnect or your subscription ends.
• Your correspondents' addresses and companies, to tell a stranger from someone you already work with. Never the content of what you exchanged.
• Connected social accounts: the Page or account id and an encrypted access token, deleted when you disconnect.

Where your data lives

Everything runs in the United States. The website and its database run on DigitalOcean in Northern Virginia. The servers that check mail run in Ashburn, Virginia, on machines we control. Nothing is processed or stored outside the country.

How it is protected

• In transit: every connection to Office Guard, to your mail provider, and between our own servers uses TLS.
• At rest: mailbox credentials and social access tokens are encrypted with AES-256-GCM under keys that live only on the server that needs them, never in the code, never in a backup of the code.
• Sign-in: Office Guard has no passwords to steal. You sign in with a one-time code sent to your email address, and the phone apps sign in the same way. Sessions expire.
• Least access: the mail-checking servers, the website, and the payment processor each hold only what they need; the server that checks mail cannot see billing, and the website cannot see mailbox credentials.
• Link checks: links are compared with Google's Web Risk lists of phishing and malware sites. Only the link is sent, never the message around it.
• The mail filter: a warning is a warning. Office Guard never deletes, moves, hides, or answers a message on your behalf, in mail, in texts, or on a social account.

Who can reach your data

Office Guard is a small company, and access is correspondingly small: the systems above and the people who operate them, under a rule that no one opens a customer's data without a support request from that customer. Our service providers process data only to provide their service to us: DigitalOcean (hosting and database), Stripe (payments), Postmark (the emails we send you), Google (Web Risk link checks and Android push), Apple (iPhone push and in-app purchases), and Meta (the Pages and Instagram accounts you connect). We do not sell or share personal information, and we do not use it for advertising.

Requests from government authorities

We review every request for its legality, challenge one we believe unlawful or overbroad, disclose only the minimum necessary to satisfy a lawful request, and keep a record of each request and our response. We have received none.

Deleting your data

You can delete your account yourself from the app or the website; the account deletion page says exactly what is removed and when. Disconnecting a mailbox or a social account deletes its credentials and stops the watch at once.

Reporting a security concern

If you believe you have found a vulnerability in Office Guard, or you think an account has been misused, write to [email protected]. We read it the same day, we will not take action against good-faith research, and we will tell you what we did about it.

Certifications

Office Guard does not yet hold a third-party certification such as SOC 2. We say so plainly rather than imply one. The practices on this page are the ones an audit would examine, and we will update this page when that changes.